Ericsson Enterprise Content Management vulnerabilities

2 CVEs affecting Ericsson Enterprise Content Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-41391, published 2021-09-17.

More from Ericsson.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-41390, published 2021-09-17. High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days. In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.
• CVE-2021-41391, published 2021-09-17. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account…